How to Disable Password Authorization in WHM

Do you allow users to connect to your server via SSH or SFTP? If they are using password authorization you may want to consider switching to SSH keys instead. With password authorization, users only need a username and password to connect to your server. This means hackers or bots can try combinations of popular usernames and password in attempts to gain access. If they eventually guess correctly, they will be allowed to connect to your server. But, if you require SSH keys to connect to your server, no one can connect unless they have a copy of the private key. In this tutorial, we will show you how to disable password authorization in WHM, so users will be required to log in with a private key.

Disabling Password Authorization

  1. Log into WHM as the ‘root‘ user.

  2. Click the Security Center option in the navigation menu.

  3. Select the SSH Password Authorization Tweak button.

  4. On the next page click the Disable Password Auth button.

    You are finished when you see message stating
    Password Auth has been disabled!

Congratulations, now you know how to disable password authorization in WHM!

Leave a Reply